Why Plan for Kerberos Deployments?

Before you install the Kerberos service, you must resolve several configuration
issues. Although changing the configuration after the initial install is not
impossible, some changes can be difficult to implement. In addition, some
changes require that the KDC be rebuilt, so it is better to consider long-term
goals when you plan your Kerberos configuration.

Deploying a Kerberos infrastructure involves such tasks as installing
KDCs, creating keys for your hosts, and migrating users. Reconfiguring a
Kerberos deployment can be as hard as performing an initial deployment, so
plan a deployment carefully to avoid having to re-configure.